Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPv6 Native with Telstra, Australia

    Scheduled Pinned Locked Moved IPv6
    165 Posts 8 Posters 43.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L
      Larrikin @Derelict
      last edited by

      @derelict Interestingly, zero UDP packets in the packet captures. All ICMP neighbor solicitation.

      1 Reply Last reply Reply Quote 0
      • L
        Larrikin @Derelict
        last edited by

        @derelict Also, no idea how to packet capture their router doing DHCPv6 negotiation. Their router plugs straight into the IPoE interface and I don't have a hub where I can plug wireshark or anything like that to capture packets. Any ideas welcome on how to achieve that. Their router also has custom firmware so no ability to packet capture off of it. I can check their limited logs, but that's about it. Let me know if you want me to that.

        1 Reply Last reply Reply Quote 0
        • L
          Larrikin @Derelict
          last edited by

          @derelict

          Here are screen shots of my LAN interface

          0_1551201294932_Screen Shot 2019-02-27 at 4.14.19 am.png 0_1551201302072_Screen Shot 2019-02-27 at 4.14.29 am.png

          RA:

          0_1551201349613_Screen Shot 2019-02-27 at 4.15.34 am.png

          Gateway:

          0_1551201434158_Screen Shot 2019-02-27 at 4.16.23 am.png

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            They do not have to know anything about pfSense. They should be able to tell you what is required of ANY dhcp6 client to pull an address and PD. Then we just make pfSense do what they require instead of guessing.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            L 2 Replies Last reply Reply Quote 0
            • L
              Larrikin @Derelict
              last edited by Larrikin

              @derelict said in IPv6 Native with Telstra, Australia:

              They do not have to know anything about pfSense. They should be able to tell you what is required of ANY dhcp6 client to pull an address and PD. Then we just make pfSense do what they require instead of guessing.

              What I've given you is everything they have given me when I've asked. I don't think they intend on giving me any more info unless there is a specific question you want me to go back and ask them. They haven't provided me with any further info. I've literally given you exactly what they have given me. They think the issue is to do with neighbor solicitation and pfsense not accepting it.

              1 Reply Last reply Reply Quote 0
              • L
                Larrikin @Derelict
                last edited by

                @derelict said in IPv6 Native with Telstra, Australia:

                They do not have to know anything about pfSense. They should be able to tell you what is required of ANY dhcp6 client to pull an address and PD. Then we just make pfSense do what they require instead of guessing.

                So in summary - I'm out of moves. I feel that if this is ever going to get resolved, and we need more info from Telstra, then I would need to ask them specific questions for them to answer (and I don't know what those questions are).

                I've asked the general questions like you've already asked me which is "how do they expect a client to get a DHCPv6 PD" and their response was the email above, plus the monitoring of my control plane, and coming back to me saying its a neighbor solicitation issue with pfsense.

                1 Reply Last reply Reply Quote 0
                • DerelictD
                  Derelict LAYER 8 Netgate
                  last edited by Derelict

                  You should absolutely see traffic on WAN on UDP/547

                  That is Solicit, Advertise, Request, Reply

                  All I did was start that capture then edit/save Interfaces > WAN

                  0_1551210796707_screenshot-192.168.223.1-8883-2019.02.26-11-51-55.png

                  Chattanooga, Tennessee, USA
                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate @Larrikin
                    last edited by

                    @larrikin said in IPv6 Native with Telstra, Australia:

                    I am reading info on how other 3rd party routers have got theirs up and running with Telstra and trying to translate that into pfsense.

                    Maybe you should post some of those.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    L 1 Reply Last reply Reply Quote 0
                    • L
                      Larrikin @Derelict
                      last edited by

                      @derelict Sure. Here is one https://forums.whirlpool.net.au/archive/2597579

                      1 Reply Last reply Reply Quote 0
                      • DerelictD
                        Derelict LAYER 8 Netgate
                        last edited by

                        OK so prefix-only probably translates to:

                        Request only an IPv6 prefix
                        Only request an IPv6 prefix, do not request an IPv6 address

                        Did you check that?

                        Chattanooga, Tennessee, USA
                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                        1 Reply Last reply Reply Quote 0
                        • L
                          Larrikin
                          last edited by

                          @derelict said in IPv6 Native with Telstra, Australia:

                          OK so prefix-only probably translates to:

                          Request only an IPv6 prefix
                          Only request an IPv6 prefix, do not request an IPv6 address

                          Did you check that?

                          Yes - I've tried that too.

                          1 Reply Last reply Reply Quote 0
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            OK and what did the dhcp6c logs look like when you only enabled that and tried it?

                            You're going to have to be a lot more forthcoming with information. We can't test it from here. Only you can.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            L 5 Replies Last reply Reply Quote 0
                            • L
                              Larrikin @Derelict
                              last edited by

                              @derelict

                              Here are the logs. Want another packet capture too?

                              Feb 27 10:26:01 dhcp6c 48288 reset a timer on em0, state=SOLICIT, timeo=4, retrans=16326
                              Feb 27 10:26:01 dhcp6c 48288 send solicit to ff02::1:2%em0
                              Feb 27 10:26:01 dhcp6c 48288 set IA_PD
                              Feb 27 10:26:01 dhcp6c 48288 set IA_PD prefix
                              Feb 27 10:26:01 dhcp6c 48288 set option request (len 4)
                              Feb 27 10:26:01 dhcp6c 48288 set elapsed time (len 2)
                              Feb 27 10:26:01 dhcp6c 48288 set client ID (len 14)
                              Feb 27 10:26:01 dhcp6c 48288 Sending Solicit
                              Feb 27 10:25:53 dhcp6c 48288 reset a timer on em0, state=SOLICIT, timeo=3, retrans=8065
                              Feb 27 10:25:53 dhcp6c 48288 send solicit to ff02::1:2%em0
                              Feb 27 10:25:53 dhcp6c 48288 set IA_PD
                              Feb 27 10:25:53 dhcp6c 48288 set IA_PD prefix
                              Feb 27 10:25:53 dhcp6c 48288 set option request (len 4)
                              Feb 27 10:25:53 dhcp6c 48288 set elapsed time (len 2)
                              Feb 27 10:25:53 dhcp6c 48288 set client ID (len 14)
                              Feb 27 10:25:53 dhcp6c 48288 Sending Solicit
                              Feb 27 10:25:49 dhcp6c 48288 reset a timer on em0, state=SOLICIT, timeo=2, retrans=3982
                              Feb 27 10:25:49 dhcp6c 48288 send solicit to ff02::1:2%em0
                              Feb 27 10:25:49 dhcp6c 48288 set IA_PD
                              Feb 27 10:25:49 dhcp6c 48288 set IA_PD prefix
                              Feb 27 10:25:49 dhcp6c 48288 set option request (len 4)
                              Feb 27 10:25:49 dhcp6c 48288 set elapsed time (len 2)
                              Feb 27 10:25:49 dhcp6c 48288 set client ID (len 14)
                              Feb 27 10:25:49 dhcp6c 48288 Sending Solicit
                              Feb 27 10:25:47 dhcp6c 48288 reset a timer on em0, state=SOLICIT, timeo=1, retrans=2083
                              Feb 27 10:25:47 dhcp6c 48288 send solicit to ff02::1:2%em0
                              Feb 27 10:25:47 dhcp6c 48288 set IA_PD
                              Feb 27 10:25:47 dhcp6c 48288 set IA_PD prefix
                              Feb 27 10:25:47 dhcp6c 48288 set option request (len 4)
                              Feb 27 10:25:47 dhcp6c 48288 set elapsed time (len 2)
                              Feb 27 10:25:47 dhcp6c 48288 set client ID (len 14)
                              Feb 27 10:25:47 dhcp6c 48288 Sending Solicit

                              1 Reply Last reply Reply Quote 0
                              • L
                                Larrikin @Derelict
                                last edited by

                                @derelict 0_1551224042344_packetcapture.cap.zip

                                That's the latest packet capture based on turning on "request only an IPv6 prefix".

                                1 Reply Last reply Reply Quote 0
                                • L
                                  Larrikin @Derelict
                                  last edited by

                                  @derelict said in IPv6 Native with Telstra, Australia:

                                  OK and what did the dhcp6c logs look like when you only enabled that and tried it?

                                  You're going to have to be a lot more forthcoming with information. We can't test it from here. Only you can.

                                  Mate - really appreciate you helping me. Apologies if I am not giving enough info. I'll just assume from here on in to include logs and packet captures every time you ask me to change something. Shout out if you need more info than those things.

                                  What just seems strange to me is this whole neighbor solicitation thing on ICMP. It doesn't seem to be able to get past that and onto UDP.

                                  1 Reply Last reply Reply Quote 0
                                  • L
                                    Larrikin @Derelict
                                    last edited by

                                    @derelict This is the only info I can get out of the Telstra router which does get a valid IPv6 address. Not sure its helpful, but thought I'd give it to you:

                                    01.01.2018 11:01:08 DHCPv6: Request on eth0, interval 4000ms.
                                    01.01.2018 11:01:10 DHCPv6: gets IPv6 address: 2001:8003:f00:3209:ac01:1e31:de2d:8725/128, valid/preferred: 3600/3600, PD: 2001:8003:Xxxx:6600::/56, valid/preferred: 3600/3600, gateway: fe80::4e16:fcff:fe2f:893, DNS:

                                    DerelictD 1 Reply Last reply Reply Quote 0
                                    • L
                                      Larrikin @Derelict
                                      last edited by

                                      @derelict More DHCPv6 logs from a reboot:

                                      Feb 27 10:45:51 dhcp6c 50809 reset a timer on em0, state=SOLICIT, timeo=0, retrans=1091
                                      Feb 27 10:45:51 dhcp6c 50809 send solicit to ff02::1:2%em0
                                      Feb 27 10:45:51 dhcp6c 50809 set IA_PD
                                      Feb 27 10:45:51 dhcp6c 50809 set IA_PD prefix
                                      Feb 27 10:45:51 dhcp6c 50809 set option request (len 4)
                                      Feb 27 10:45:51 dhcp6c 50809 set elapsed time (len 2)
                                      Feb 27 10:45:51 dhcp6c 50809 set client ID (len 14)
                                      Feb 27 10:45:51 dhcp6c 50809 a new XID (57b82e) is generated
                                      Feb 27 10:45:51 dhcp6c 50809 Sending Solicit
                                      Feb 27 10:45:50 dhcp6c 50809 reset a timer on em0, state=INIT, timeo=0, retrans=891
                                      Feb 27 10:45:50 dhcp6c 50646 called
                                      Feb 27 10:45:50 dhcp6c 50646 called
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of closure [}] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of closure [}] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[8] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[sla-len] (7)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[0] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[sla-id] (6)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>begin of closure [{] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <5>[em1] (3)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[prefix-interface] (16)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[infinity] (8)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[56] (2)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[/] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[::] (2)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[prefix] (6)
                                      Feb 27 10:45:50 dhcp6c 50646 <13>begin of closure [{] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <13>[0] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <13>[pd] (2)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[id-assoc] (8)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of closure [}] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>comment [# we'd like some nameservers please] (35)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>["/var/etc/dhcp6c_wan_script.sh"] (31)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[script] (6)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[domain-name] (11)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[request] (7)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[domain-name-servers] (19)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[request] (7)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>comment [# request prefix delegation] (27)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>end of sentence [;] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[0] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[ia-pd] (5)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[send] (4)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>begin of closure [{] (1)
                                      Feb 27 10:45:50 dhcp6c 50646 <5>[em0] (3)
                                      Feb 27 10:45:50 dhcp6c 50646 <3>[interface] (9)
                                      Feb 27 10:45:50 dhcp6c 50646 skip opening control port
                                      Feb 27 10:45:50 dhcp6c 50646 failed initialize control message authentication
                                      Feb 27 10:45:50 dhcp6c 50646 failed to open /usr/local/etc/dhcp6cctlkey: No such file or directory
                                      Feb 27 10:45:50 dhcp6c 50646 extracted an existing DUID from /var/db/dhcp6c_duid: 00:01:00:01:24:07:f7:52:00:0c:29:05:a3:a1

                                      1 Reply Last reply Reply Quote 0
                                      • DerelictD
                                        Derelict LAYER 8 Netgate
                                        last edited by

                                        That doesn't show a DHCP attempt.

                                        You might want to reset to defaults and start over.

                                        Resetting everything related to the WAN DHCP6 should be enough but nobody knows what you've clicked to try to fix this.

                                        Chattanooga, Tennessee, USA
                                        A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                        DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                        Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                        L 2 Replies Last reply Reply Quote 0
                                        • DerelictD
                                          Derelict LAYER 8 Netgate @Larrikin
                                          last edited by

                                          @larrikin Well then that whirlpool link you posted is wrong because obviously it issues a WAN IP address.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          L 1 Reply Last reply Reply Quote 0
                                          • DerelictD
                                            Derelict LAYER 8 Netgate
                                            last edited by

                                            Did you get traffic on IPv6/UDP/547 on the WAN? If that's not happening nothing is going to work.

                                            Chattanooga, Tennessee, USA
                                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                            L 2 Replies Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.